diff options
author | Kelvin M. Klann <kmk3.code@protonmail.com> | 2023-04-24 03:27:50 -0300 |
---|---|---|
committer | Kelvin M. Klann <kmk3.code@protonmail.com> | 2023-05-03 16:21:18 -0300 |
commit | a2c8a5f03ce4ef52c514dd3b60458474844ec4f2 (patch) | |
tree | 5c7374d6d2cf8eee94d4363f4561c509f7984655 /.github/workflows/build.yml | |
parent | tests: disable ping test in test/chroot/fs_chroot.exp (diff) | |
download | firejail-a2c8a5f03ce4ef52c514dd3b60458474844ec4f2.tar.gz firejail-a2c8a5f03ce4ef52c514dd3b60458474844ec4f2.tar.zst firejail-a2c8a5f03ce4ef52c514dd3b60458474844ec4f2.zip |
ci: allow endpoints used in tests
Relevant lines from build_and_test[1]:
endpoint called ip address:port 1.1.1.1:1025, domain:
endpoint called ip address:port 54.185.253.63:43, domain: whois.pir.org.
##[error]StepSecurity Harden Runner: DNS resolution for domain dns.quad9.net. was blocked. This domain is not in the list of allowed-endpoints.
##[error]StepSecurity Harden Runner: DNS resolution for domain whois.pir.org. was blocked. This domain is not in the list of allowed-endpoints.
The relevant tests were added in the following commits:
* ef4409e7b ("added whois and dig profiles", 2018-08-30)
* 171898233 ("more profile fixes/testing", 2023-01-19)
Relates to #5439 #5485.
[1] https://github.com/netblue30/firejail/actions/runs/4854586882/jobs/8652141329
Diffstat (limited to '.github/workflows/build.yml')
-rw-r--r-- | .github/workflows/build.yml | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index b72bdd611..c6bb3b67c 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml | |||
@@ -52,11 +52,14 @@ jobs: | |||
52 | with: | 52 | with: |
53 | egress-policy: block | 53 | egress-policy: block |
54 | allowed-endpoints: > | 54 | allowed-endpoints: > |
55 | 1.1.1.1:1025 | ||
55 | azure.archive.ubuntu.com:80 | 56 | azure.archive.ubuntu.com:80 |
56 | debian.org:80 | 57 | debian.org:80 |
58 | dns.quad9.net:53 | ||
57 | github.com:443 | 59 | github.com:443 |
58 | packages.microsoft.com:443 | 60 | packages.microsoft.com:443 |
59 | ppa.launchpadcontent.net:443 | 61 | ppa.launchpadcontent.net:443 |
62 | whois.pir.org:43 | ||
60 | www.debian.org:443 | 63 | www.debian.org:443 |
61 | www.debian.org:80 | 64 | www.debian.org:80 |
62 | yahoo.com:1025 | 65 | yahoo.com:1025 |